Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.mft
File:                     ySTN5BVFl0tvV4MubGA7zIlm2eA.mft (raw, json)
Hash identifier:          g6HCysLPWRVI/qgs1dbxWPZ08GbnA1I9oyIeBKzws9w=
Subject key identifier:   FC:5A:FA:A4:D0:0B:95:A0:BB:B0:99:73:7F:76:91:EC:53:03:E0:87
Authority key identifier: C9:24:CD:E4:15:45:97:4B:6F:57:83:2E:6C:60:3B:CC:89:66:D9:E0
Certificate issuer:       /CN=A91F2DDD/serialNumber=C924CDE41545974B6F57832E6C603BCC8966D9E0
Certificate serial:       03F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySTN5BVFl0tvV4MubGA7zIlm2eA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.mft
Manifest number:          1313
Signing time:             Tue 28 Jul 2026 17:41:42 +0000
Manifest this update:     Tue 28 Jul 2026 17:41:41 +0000
Manifest next update:     Tue 04 Aug 2026 17:41:41 +0000
Files and hashes:         1: ySTN5BVFl0tvV4MubGA7zIlm2eA.crl (hash: Z2skjIRSu9bOqD29uPFJRM6Nf6sQw7xx8zjlrbzFLZI=)
                          2: 2FBEB0B0D5B011EC90A8A031C4F9AE02.roa (hash: +CMTAtAhA5A3bcW+qweztRhJOEGADprPEZzn/dd78sw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.crl
                          rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySTN5BVFl0tvV4MubGA7zIlm2eA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1010 (0x3f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2DDD, serialNumber=C924CDE41545974B6F57832E6C603BCC8966D9E0
        Validity
            Not Before: Jul 28 17:41:41 2026 GMT
            Not After : Aug  4 17:41:41 2026 GMT
        Subject: CN=6a68e9d5-09ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:dc:22:3f:c3:0c:d5:d0:c5:db:d2:0a:30:
                    b8:6e:22:16:4a:3c:d0:9f:ad:3d:c0:58:c6:0d:aa:
                    ab:6b:fa:98:7a:1e:1b:f6:5c:29:58:e4:25:d2:4b:
                    ab:66:c0:53:fb:0c:99:05:a9:f1:2b:8f:d7:dd:62:
                    e3:cb:84:85:6c:19:5c:53:50:ac:63:12:b2:c3:9b:
                    6e:10:f7:5b:bc:1f:7d:13:bc:dc:c4:4f:15:c4:fb:
                    a2:03:24:d2:e5:00:cf:73:4e:9f:07:87:7c:93:c5:
                    67:df:d9:4f:cf:28:67:bb:40:bd:fe:93:07:e6:07:
                    42:0b:f5:c2:00:6b:c1:eb:2f:77:51:fc:8c:41:56:
                    4c:db:1d:ae:bf:70:e4:9f:3b:49:6a:e1:38:b9:fb:
                    3b:cd:e3:d5:c1:ec:5e:8e:a6:2d:c4:98:e1:39:a0:
                    cb:ce:e9:71:63:17:3b:34:1a:e6:61:df:29:76:83:
                    fa:ff:be:ad:6b:a4:bb:21:85:17:3b:36:3d:49:07:
                    4b:02:03:b0:92:f8:7c:a0:fb:0f:58:47:da:11:ea:
                    e3:8e:7e:96:02:b6:b9:3c:3d:8e:d6:48:9d:f8:30:
                    74:4c:0d:d9:46:1b:34:87:f6:89:08:4f:34:6a:cb:
                    17:ba:c5:b4:ae:e6:09:a5:9b:9b:47:0b:9a:dd:a1:
                    1d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5A:FA:A4:D0:0B:95:A0:BB:B0:99:73:7F:76:91:EC:53:03:E0:87
            X509v3 Authority Key Identifier:
                keyid:C9:24:CD:E4:15:45:97:4B:6F:57:83:2E:6C:60:3B:CC:89:66:D9:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySTN5BVFl0tvV4MubGA7zIlm2eA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/ySTN5BVFl0tvV4MubGA7zIlm2eA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f0:dc:56:39:a0:a4:8e:21:f5:41:7c:de:9a:f2:c5:48:e2:
         d0:60:87:ee:59:76:e6:5e:82:71:85:9a:43:99:21:e2:3a:6a:
         5c:03:f5:96:32:ce:c1:e1:d1:7d:e7:54:7a:0e:6f:10:d1:e5:
         99:ac:b7:35:8e:99:7b:ce:bd:45:32:65:39:3f:d6:fe:2d:ec:
         da:46:bd:d5:0f:ed:49:eb:88:2a:b3:fd:bb:1d:23:cb:00:b3:
         24:4b:1b:49:1b:9d:6c:eb:df:d3:a5:65:4f:38:87:f7:89:33:
         62:43:20:3d:78:e7:53:7a:08:74:c9:d2:9e:28:d0:cd:6f:9f:
         e9:d5:4c:8d:f4:bb:1e:75:8c:54:8a:a8:7a:15:7f:8c:cf:5c:
         25:c0:75:b6:7a:ec:b5:49:56:75:22:11:d7:fd:6e:ec:dc:b5:
         ff:7a:5b:39:cd:c7:fe:ff:4d:ea:6d:c3:f2:c2:26:71:53:91:
         3b:ef:b5:28:70:4e:52:eb:54:28:42:7a:d7:26:c5:4c:15:23:
         b8:00:fe:06:70:bb:47:11:ab:c8:8f:e6:e0:e3:98:17:95:f1:
         b1:6b:04:55:16:ec:1e:76:33:de:91:52:ce:99:1e:66:5d:92:
         2b:97:8a:0e:17:57:61:09:17:0b:79:23:d7:22:74:b6:2c:5b:
         f3:be:72:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:45:26 2026 by rpki-client